cyberedge-scan-vulnerabilities
Run and interpret CyberEdge's reviewed, bounded Nuclei vulnerability baseline for an explicitly authorized Scope. Use when an AI operator must execute versioned signed templates, wait for the Task, correlate normalized Findings with immutable scanner Evidence, or distinguish negative coverage from adapter failure.
适合你，如果需要执行签名漏洞模板并关联证据
npx oh-my-skill add symph0nia/cyberedge/cyberedge-scan-vulnerabilitiescurl -fsSL https://oh-my-skill.com/install.sh | bash -s -- symph0nia/cyberedge/cyberedge-scan-vulnerabilitiesnpx oh-my-skill verify symph0nia/cyberedge/cyberedge-scan-vulnerabilities怎么用
商店整理自技能原文 · 版本 0af016f · 表述以原文为准装上后，Claude 可以使用 CyberEdge 工具对已授权的网络目标执行漏洞扫描，等待扫描完成，然后自动整理和报告发现的漏洞及其证据。
当用户要求对已授权的目标进行漏洞扫描，或需要分析扫描结果并关联证据时触发。
技能原文 SKILL.md
CyberEdge Scan Vulnerabilities
Use cyberedge-agent; this machine bridge is not a human CLI.
Preconditions
- Require an existing Scope with a non-empty human authorization reference.
- Require this exact Skill/version grant with
scan.vulnerability,task.read,finding.read,evidence.read, andreport.read. - Confirm that the deployment has mounted a reviewed, signed template allowlist. Do not upload, generate, select, or edit templates through CyberEdge.
Workflow
- Start
policy_vulnerability_baselinefor the authorized Scope. - Watch the Task until it becomes terminal.
- Read the Task report and Scope Findings.
- Correlate each
detector=nucleiFinding with itsnuclei.resultObservation and NDJSON Evidence. - Treat
nuclei.coverageas a completed negative evaluation for that derived Website target. - Treat
nuclei.errorornuclei.no_targetsas unknown coverage. Do not claim the Scope is clean. - Report the template ID, matcher, matched location, severity, Evidence ID, and Finding lifecycle state without adding unverified exploitability claims.
The server derives at most 64 credential-free HTTP(S) targets from Website observations. The adapter permits only reviewed signed HTTP/SSL templates, disables redirects, Interactsh, automatic updates, raw request/response output, code, headless, fuzzing, and DoS-tagged templates, and enforces fixed rate/concurrency/time limits.
Never invoke Nuclei directly, pass targets or flags, access the template mount, execute PoCs, or fall back to another scanner.
{"request_id":"req-1","idempotency_key":"idem-1","agent_id":"codex-main","skill_name":"cyberedge-scan-vulnerabilities","skill_version":"0.1.0","action":"start_scan","scope_id":"scope-id","policy_id":"policy_vulnerability_baseline"}